Alcatel Carrier Internetworking Solutions OmniSwitch 9000 - Manual (Page 12)

12 Alcatel-Lucent | OmniSwitch 9000
MULTI-LAYER SECURITY
With networks under constant attack from the outside world and
even from within the company, a network needs to provide easy
access to users and resources, yet possess extensive security features
that can be managed across a global enterprise.
The OS9000s provide multi-layer security with a range of security features that can be
implemented in the wiring closet, the core, and throughout the network. These include:
■ User authentication
■ Virtual local area networks (VLANs)
■ Quarantine VLANs
■ Access control lists (ACLs)
■ Capable of filtering unexpected control traffic (BPDU, RIP, OSPF, BGP) from user ports
■ Prevents IP source address spoofing
■ Authenticated switch access
■ Encryption for secure management (SSHv2 / HTTPs / SNMPv3)
■ Denial of service protection
Multi-layer security enables the building of sophisticated hardware and software-based
solutions that can be integrated with policy-based management and other technologies
such as smart cards, PKI, and biometrics for enhanced security implementations. For secure
management there are many features integrated into the architecture including authenticated
user access, SNMPv3 and SSL for encrypted sessions, and partitioned management for multi-
tiered access and granular network administration.